Privacy Policy

Last updated: 14 July 2026

1. Data Controller

The controller responsible for the processing of personal data on this website and in connection with my services is:

Denise Yahrling
Scheidlingsmühlenweg 63
40591 Düsseldorf
Germany

Email: dyahrling@gmail.com

---

2. General Information

Protecting your personal data is important to me. This Privacy Policy explains what personal data I collect, how I use it, and what rights you have under the General Data Protection Regulation (GDPR).

You can generally visit this website without actively providing personal information. However, certain services—such as contacting me by email, subscribing to my newsletter, booking a discovery call, or purchasing digital products—require the processing of personal data.

I only process personal data where this is necessary:

• to provide my website and services,
• to respond to your enquiries,
• to fulfil contractual obligations,
• to comply with legal obligations, or
• where you have given your consent.

The legal basis for processing personal data is primarily:

• Article 6(1)(a) GDPR – your consent
• Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures
• Article 6(1)(c) GDPR – compliance with legal obligations
• Article 6(1)(f) GDPR – my legitimate interests in operating a secure and functional website and business.

---

3. Website Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich.

When you visit this website, your browser automatically transmits certain technical information to the hosting provider in order to display the website securely and reliably.

The hosting provider processes personal data on my behalf as a data processor in accordance with Article 28 GDPR.

The legal basis for this processing is Article 6(1)(f) GDPR, based on my legitimate interest in providing a secure, reliable and efficient website.

---

4. Server Log Files

Whenever you access this website, certain technical information is collected automatically by the web server.

This may include:

• your IP address,
• browser type and version,
• operating system,
• referring website (referrer URL),
• pages visited,
• date and time of access,
• internet service provider,
• and other technical information required for the secure operation of the website.

This information is processed solely to ensure the security, stability and proper functioning of the website and to detect and prevent misuse.

The legal basis for this processing is Article 6(1)(f) GDPR.

---

5. Cookies, Local Storage and Session Storage

This website uses cookies as well as Local Storage and Session Storage technologies to ensure the proper functioning of the website and to improve your browsing experience.

Cookies are small text files stored on your device. Local Storage and Session Storage are browser technologies that temporarily store information to enable certain website functions.

Some cookies are technically necessary for the operation of the website. These are processed on the basis of my legitimate interest under Article 6(1)(f) GDPR.

Any cookies that are not strictly necessary are only used with your prior consent in accordance with Article 6(1)(a) GDPR.

You can change or withdraw your cookie consent at any time through the cookie settings on this website. You can also delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

---

6. Cookie Consent (CookieYes)

This website uses CookieYes to manage cookie consent in accordance with the GDPR.

CookieYes stores your consent preferences so that your choices can be respected during future visits. In doing so, certain information may be processed, including your consent status, IP address, browser information and the date and time of your consent.

The legal basis for this processing is Article 6(1)(c) GDPR, where required for compliance with legal obligations relating to consent management, and Article 6(1)(f) GDPR for maintaining a legally compliant website.

---

7. Google Fonts

This website uses Google Fonts, which are hosted locally on my own server.

Because the font files are stored locally, no connection to Google's servers is established when you visit this website, and no personal data is transmitted to Google for this purpose.

---

8. Contact by Email

If you contact me by email, I process the personal data you voluntarily provide, such as your name, email address and the contents of your message.

Your data is used solely for the purpose of responding to your enquiry and communicating with you.

Depending on the nature of your enquiry, the legal basis for processing is either:

• Article 6(1)(b) GDPR, where your enquiry relates to a potential or existing contract; or
• Article 6(1)(f) GDPR, based on my legitimate interest in responding to enquiries and communicating with visitors.

I do not share your personal data with third parties unless required by law or necessary to fulfil your request.

---

9. Newsletter (Brevo)

If you subscribe to my newsletter, I use Brevo (formerly Sendinblue) as my email marketing service provider.

When you subscribe, your email address and any additional information you voluntarily provide are processed for the purpose of sending newsletters, updates and information about my work, offers and events.

Registration takes place using the double opt-in procedure. This means you will receive a confirmation email before your subscription becomes active.

You may unsubscribe from the newsletter at any time by clicking the unsubscribe link included in every email or by contacting me directly.

The legal basis for processing your personal data is your consent under Article 6(1)(a) GDPR.

Brevo processes personal data on my behalf in accordance with a Data Processing Agreement under Article 28 GDPR.

---

10. Appointment Booking (Calendly)

If you book a discovery call or another appointment through my website, you will be redirected to Calendly. Calendly processes the personal data required to arrange and manage appointments, such as your name, email address, chosen appointment time and any information you choose to provide during the booking process.Calendly acts as an independent service provider, and the processing of your personal data is subject to Calendly's own Privacy Policy.The legal basis for processing your booking information is Article 6(1)(b) GDPR, where the booking relates to pre-contractual measures or the performance of a contract.

11. Purchases through the Alfima Shop

Digital products, online courses, memberships and other digital offerings are provided through my shop hosted on Alfima.

If you purchase a product or membership, you will be redirected to the Alfima platform, where your order is processed and your customer or membership account may be created.

In connection with your purchase, the following personal data may be processed, where applicable:

• name,
• email address,
• billing information,
• purchased products or memberships,
• account information,
• access details,
• and information required for the fulfilment of your purchase.

This data is processed solely for the purpose of fulfilling the contract, providing access to your purchased content and complying with applicable legal obligations.

The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract) and, where applicable, Article 6(1)(c) GDPR (legal obligations).

Alfima processes certain data on my behalf as a data processor. Further information about Alfima's processing of personal data can be found in their own Privacy Policy.

---

12. Payment Processing

Payments for digital products, memberships and other purchases made through my Alfima shop are processed using the payment service providers integrated into the Alfima platform.

Depending on the payment method selected, your payment data may be processed directly by the respective payment provider.

For appointments or services booked outside the Alfima platform, payment may be made in advance by bank transfer or PayPal.

The payment provider receives only the information necessary to process the payment.

The legal basis for processing payment-related data is Article 6(1)(b) GDPR.

Where payment providers transfer personal data to countries outside the European Economic Area, such transfers take place only where appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or another lawful transfer mechanism under the GDPR.

For more information, please refer to the Privacy Policy of the relevant payment provider.

---

13. Access to Digital Products and Memberships

If you purchase a digital product or become a member of one of my programmes, I process the personal data necessary to provide access to your purchased content.

This may include:

• your name,
• email address,
• login details,
• membership status,
• access history,
• and information relating to your use of the members' area where required to provide the service.

This information is processed solely to deliver the purchased content, manage your membership and ensure the secure operation of the platform.

The legal basis for this processing is Article 6(1)(b) GDPR.

---

14. Data Retention

I retain personal data only for as long as necessary to fulfil the purposes for which it was collected or where I am legally required to retain it.

This may include statutory retention obligations under German commercial or tax law.

Once the applicable retention period has expired or the purpose of processing no longer applies, your personal data will be securely deleted or anonymised unless further storage is required by law.

---

15. Your Rights under the GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• the right to access your personal data (Article 15 GDPR);
• the right to rectify inaccurate or incomplete data (Article 16 GDPR);
• the right to erasure ("right to be forgotten") where the legal requirements are met (Article 17 GDPR);
• the right to restrict processing (Article 18 GDPR);
• the right to data portability (Article 20 GDPR);
• the right to object to processing based on legitimate interests (Article 21 GDPR);
• the right to withdraw your consent at any time, where processing is based on your consent (Article 7(3) GDPR).

If you wish to exercise any of these rights, you are welcome to contact me at:

dyahrling@gmail.com

You also have the right to lodge a complaint with a supervisory authority responsible for data protection if you believe that the processing of your personal data violates applicable data protection law.

The competent supervisory authority for my business is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)

---

16. Data Security

I take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

Despite these measures, please be aware that data transmission over the internet can never be guaranteed to be completely secure. For this reason, I cannot guarantee absolute security of information transmitted electronically.

---

17. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in legal requirements, technical developments or the way I process personal data.

The most recent version will always be published on my website and, where applicable, within my online shop.

The date shown at the top of this Privacy Policy indicates when it was last updated.

Cookie Policy

 

What are cookies?

 

How do we use cookies?

 

Types of cookies we use

 

Manage cookie preferences

Consent Preferences

 

Cookie Policy generated by CookieYes - Cookie Policy Generator